Static task
static1
Behavioral task
behavioral1
Sample
645c87fb94b267ccbdcea97dceec133e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
645c87fb94b267ccbdcea97dceec133e_JaffaCakes118
-
Size
1.0MB
-
MD5
645c87fb94b267ccbdcea97dceec133e
-
SHA1
5d87f33f0a109b118152731242158d98954684dd
-
SHA256
eda6867647071ecf1aeddb5e1952f05b84c4a3826b072749203c008c85677b59
-
SHA512
2986667d771b28e25a2fbf2cb13fd9de751e425c2a6036150728dc6bef068fed790ec65e9ae6887d657e65dd79a0521d2d965f5d278e38f0679161803a3795bf
-
SSDEEP
12288:kfcXhyvTh71N+3Yd5GmgGHategSpcv5ZBze/t79g5fLM3bPcv0pM2lg8lp:T3YdLpH9PpMG79kLsPcg/l7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 645c87fb94b267ccbdcea97dceec133e_JaffaCakes118
Files
-
645c87fb94b267ccbdcea97dceec133e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 350KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ